CVE Vulnerabilities

CVE-2022-36179

Insufficient Session Expiration

Published: Nov 22, 2022 | Modified: Nov 21, 2024
CVSS 3.x
9.8
CRITICAL
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

Fusiondirectory 1.3 suffers from Improper Session Handling.

Weakness

According to WASC, “Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization.”

Affected Software

Name Vendor Start Version End Version
Fusiondirectory Fusiondirectory 1.3 (including) 1.3 (including)
Fusiondirectory Ubuntu bionic *
Fusiondirectory Ubuntu trusty *
Fusiondirectory Ubuntu xenial *

Potential Mitigations

References